# ltb-project/self-service-password

Web interface to change and reset password in an LDAP directory

Repository: https://github.com/ltb-project/self-service-password
Canonical: https://ross.abutalabs.com/products/self-service-password
Homepage: https://self-service-password.readthedocs.io/en/latest/
Language: PHP
License: GPL-3.0
License Family: copyleft
Topics: ldap, password, self-service, self-service-password
Last push: 2026-08-25T06:47:28+00:00

## Health v2 (maintenance only)
Score: 91/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 99, release rhythm 76, longevity 100
- inputs: {"age_days": 3669, "days_push": 8, "days_rel": 80, "gap_med": 72, "n_releases_24m": 6}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1338, forks 353 (observed 2026-08-28T04:04:25.779357+00:00)

## What it is
Self Service Password is a PHP web application that lets users change and reset their own passwords in an LDAP directory, including Active Directory. It supports multiple reset channels (mail tokens, SMS, security questions), local password policies, Samba/AD modes, and a REST API.

## Use cases
- let users reset forgotten LDAP passwords via email token
- allow employees to change their Active Directory password from a web portal
- enforce a password policy with complexity and haveibeenpwned checks
- enable password reset by SMS code
- let users update their SSH public key stored in LDAP
- self-service update of mail address and phone number in LDAP

## When to choose
- your organization authenticates against LDAP or Active Directory and wants to cut helpdesk password tickets
- you need multiple reset channels (mail, SMS, security questions) with a configurable password policy
- you want a self-hosted, Docker-deployable PHP app with Debian/Red Hat packages

## When to avoid
- your identities live in a non-LDAP backend like a SQL database or SaaS IdP
- you need a full identity management suite rather than just password self-service
- you cannot run PHP or don't want to maintain a web application for this

## Facets
- artifact type: application
- maturity: stable
- function: auth, web-framework, http-server, email, security
- domain: security, self-hosted, web-development, developer-tools
- platform: php, self-hosted
- tags: ldap, password-reset, self-service, active-directory, samba, password-policy, php-application, web-server, docker, linux

## Member repositories
- ltb-project/self-service-password (main) score 91

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:25.779357+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:44:00.159391+00:00, confidence not recorded.
  - readme: https://github.com/ltb-project/self-service-password (fetched 2026-08-28T04:04:25.779357+00:00, sha fb9d52956338)
- Data as of 2026-08-30T08:39:29.467469+00:00.